System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Odd behavior with account on hp-ux 11.31

Sean M.
Advisor

Odd behavior with account on hp-ux 11.31

We have several hp-ux 11.31 boxes that have been setup with a webuser for pulling files and performance data. For some reason this account is getting locked out constantly (it uses ssh keys and the password is reset every 30 days). While looking in syslog I am seeing the below when lockouts are occurring:

Aug 1 16:06:32 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 1 16:09:04 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 2 16:06:29 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 2 16:06:40 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 2 16:09:01 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.

at other times it does authenticate with no problems:

Aug 2 16:10:28 some_server sshd[7073]: Accepted publickey for webutil from 10.xxx.xx.xx port xxxxx ssh2

I'm unfamiliar with cimserver, but I know we don't have it setup as any central management piece for our UX servers. Any ideas as to what could be causing this?
3 REPLIES
Steven E. Protter
Exalted Contributor

Re: Odd behavior with account on hp-ux 11.31

Shalom,

cimserver is a management product that monitors your servers. It is possible the constant rebuilding of keys every thirty days, is causing a central cimserver to be unable to communicate with this system.

Therefore the account is being locked by the failure of a script to auto connect.

The idea of replacing public/private keys every thirty days is overkill.

Doing so every year or so is fine.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Sean M.
Advisor

Re: Odd behavior with account on hp-ux 11.31

We are resetting the password on the account every 30 days; currently the account is using the same keys that we created 6 months ago.
Sean M.
Advisor

Re: Odd behavior with account on hp-ux 11.31

No solution found, but closing thread